Globally accredited to the highest standard

Certificate holders and users need the certainty that their Certificate Authority (CA) meets the highest possible security standards. QuoVadis is subject to a broad range of independent annual audit processes. This way, you can always trust that your certificates are in the best hands.

ZertES Qualified Trust Services Provider
QuoVadis is authorized to issue qualified electronic certificates that conform to Swiss law (ZertES, Federal Electronic Signatures Act) and the European standard set by ETSI (European Telecommunications Standards Institute). Annual audits are performed by KPMG on behalf of BAKOM and SECO. The new ZertES became law on January 1, 2005 and supports secure, traceable and legally valid electronic business transactions as well as electronic document archiving (including the legally compliant filing and archiving of VAT-relevant documents). QuoVadis Qualified Time-Stamping Service is authorized to issue qualified electronic timestamps that conform to Swiss law (ZertES, Federal Electronic Signatures Act) and the European standard (ETSI). Annual audits are performed by KPMG on behalf of BAKOM and SECO. The reform of the Electronic Signatures Ordinance on January 1, 2017 introduced a mandatory qualified timestamp, which must be used with a qualified electronic signature.
EU Qualified Trust Service Provider
QuoVadis is a Qualified TSP accredited by the Dutch Agentschap Telecom based on a BSI certification, complying with the requirements of the ETSI EN 319 411-1 and ETSI EN 319 411-2 standards for Electronic Signatures and Electronic Seals. This certification requires annual audits by the BSI.
WebTrust for Certification Authorities
QuoVadis is one of the few certificate service providers in the world to achieve the WebTrust for CAs qualification. This top certification validates the high level of trust attributed to QuoVadis certificates. WebTrust for CAs is subject to an annual audit by Ernst & Young.
WebTrust was created by the American Institute of Certified Public Accountants (AICPA) and the Canadian Institute of Chartered Accountants (CICA) as a globally recognized standard for certification service providers in order to guarantee the highest possible standards and quality at an international level.
 

 

WebTrust for Baseline Requirements
WebTrust for Baseline Requirements is the minimal requirement stipulated by the CA/B Forum and serves as a foundation for the audit of certification authorities. QuoVadis meets these requirements for the issuance and management of publicly trusted SSL certificates. Webtrust for Baseline Requirements requires an annual audit by Ernst & Young. “Baseline Requirements for the Issuance and Management of Publicly-Trusted Certificates” are defined minimum requirements for the issuance of TLS/SSL certificates. The “WebTrust for BR” certification requires QuoVadis to undergo an annual audit.
 

 

WebTrust for Extended Validation
WebTrust for Extended Validation is another top-tier recognition based on the strict “Guidelines for the Issuance and Management of EV Certificates” laid down by the CA/B Forum. WebTrust for EV presupposes the recognition as a WebTrust CA and is subject to annual auditing by Ernst & Young. “Guidelines for the Issuance and Management of EV Certificates“ are defined requirements for the issuance of TLS/SSL certificates with Extended Validation (EV). Only suitably accredited CAs may issue EV TLS/SSL certificates. The “WebTrust for EV” certification requires QuoVadis to undergo an annual audit.
 

 

WebTrust for Code Signing
WebTrust for Code Signing is used to assess a CA’s controls based on the minimum requirements defined by the code signing task force for the issuance and management of publicly accessible code signing certificates. WebTrust for Code Signing requires an annual audit.
 

 

PKIoverheid (Netherlands)
QuoVadis is a certification service provider/TSP for PKIoverheid, used by the Dutch government in particular for trusted internal and external electronic communication. DigiCert+QuoVadis is certified by the BSI to issue qualified electronic certificates that conform to the ETSI EN 319 411-1 and ETSI EN 319 411-2 standards for electronic signatures, electronic seals and website authentication and that are subordinate to the Dutch government’s root certificate.
 

 

e-Recognition/eHerkenning (Netherlands)
DigiCert+QuoVadis is an accredited provider in the Dutch e-Recognition program. eHerkenning is a trust framework that facilitates identification and authorization in business-to-government correspondence.
 

 

ISO/IEC 27001
QuoVadis Trustlink BV and QuoVadis Trustlink BVBA are certified by KIWA for compliance with ISO/IEC 27001 “Information Security Management Systems Requirements Specification”.  ISO/IEC 27001 is an internationally-recognized certificate for evaluating how securely an organization manages and stores its information and data. The certification is for the issuance of Dutch e-Recognition/eHerkenning products and requires an annual audit of QuoVadis.
 

 

Qualified Certification Services Provider (Belgium)
QuoVadis is registered and authorized by the Belgian FPS Economy – Quality and Safety to issue qualified electronic certificates in compliance with Belgian law including ETSI TS 101 456 for Qualified Certification Service Providers (CSP).
 

 

Bermuda Authorised Certification Services Provider
The Bermuda Authorized Certification Service Provider (CSP) accreditation is granted by the Ministry of Energy, Telecommunications and E-Commerce based on an external review defined in the Bermuda Electronic Transactions Act. The CSP standard includes elements of ISO 17799 (Code of Practice for Information Security Management), EESSI (European Electronic Signature Standardisation Initiative), and WebTrust for CAs. It requires a biennial re-certification.
 

 

EUgridPMA
QuoVadis is an official certificate provider for the members of the EUGridPMA. QuoVadis operates a managed certification authority for EuroGridPMA (European Policy Management Authority for Grid Authentication in e-Science), which is part of the International Grid Trust Federation (IGTF). In Switzerland, these certificates are supplied to Grid members in research, engineering and universities by QuoVadis partner SWITCH. European customers can obtain the certificates directly from QuoVadis.